Search Results fnd_web_sec




Overview
Explore in AI Chat

Overview

APPS.FND_WEB_SEC is a core Oracle E-Business Suite security package body that governs the authentication, credential management, and password lifecycle for EBS application users and Oracle database accounts. Operating within the Applications (APPS) schema, it encapsulates the logic that validates logins, enforces password policies, obfuscates stored credentials, and supports Single Sign-On and LDAP integration paths. Because it touches both the FND_USER repository and the FND_ORACLE_USERID mapping, it sits at the intersection of application security and database account provisioning. The package is classified as VALID and OTHER in ETRM 12.2.2, indicating it is a supporting internal utility rather than a formal public API. Its broad dependency graph — spanning FND_FUNCTION_SECURITY_CACHE, FND_PROFILE, FND_MESSAGE, FND_VAULT, and the DBMS_OBFUSCATION_TOOLKIT — reflects its central role in EBS sign-on and password maintenance across releases 12.1.1 and 12.2.2.

Key Procedures and Functions

The package exposes roughly 33 documented procedures and functions grouped around authentication and credential handling:

Parameter lists are intentionally omitted; only purpose is documented here.

Tables Accessed

The package reads and writes several core EBS security tables through APPS synonyms:

  • FND_USER / FND_USER_S — the primary user repository, read for validation and written during creation and password changes.
  • FND_ORACLE_USERID / FND_ORACLE_USERID_S — maps application users to Oracle database schemas, supporting CREATE_ORACLE_USER and re-encryption routines.
  • FND_UNSUCCESSFUL_LOGINS — records failed authentication attempts used for lockout policy.
  • FND_USER_PREFERENCES and FND_LANGUAGES — supply user preference and language context during validation.
  • DBMS_LOCK, DBMS_RANDOM, DBMS_SESSION, DBMS_SQL, DBMS_UTILITY, DUAL, USER_TABLES — supporting PL/SQL and dictionary objects used for serialization, random salt generation, session state, and metadata lookups.

Usage Notes

FND_WEB_SEC is invoked automatically by the EBS sign-on flow, by the Oracle Applications Manager (OAM) user-management screens, and by password-change forms. It is referenced by 37 other database objects, confirming its role as a shared internal service. Custom code should avoid direct calls, since password and encryption behavior is version-sensitive between 12.1.1 and 12.2.2, particularly around re-encryption and Oracle DB account integration. Administrators typically interact with it indirectly through the Change Password and User Management concurrent programs and forms rather than through direct invocation.